CVEvulnerability
CVE-2024-20313
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-120
Description
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected configurations
• cisco ios xe 17.5.1
• cisco ios xe 17.5.1a
• cisco ios xe 17.6.1
• cisco ios xe 17.6.1a
• cisco ios xe 17.6.1w
• cisco ios xe 17.6.1x
• cisco ios xe 17.6.1y
• cisco ios xe 17.6.1z
• cisco ios xe 17.6.1z1
• cisco ios xe 17.6.2
• cisco ios xe 17.6.3
• cisco ios xe 17.6.3a
• cisco ios xe 17.6.4
• cisco ios xe 17.6.5
• cisco ios xe 17.6.5a
• cisco ios xe 17.7.1
• cisco ios xe 17.7.1a
• cisco ios xe 17.7.1b
• cisco ios xe 17.7.2
• cisco ios xe 17.8.1
• cisco ios xe 17.8.1a
• cisco ios xe 17.9.1
• cisco ios xe 17.9.1a
• cisco ios xe 17.9.1w
• cisco ios xe 17.9.1x
• cisco ios xe 17.9.1x1
• cisco ios xe 17.9.1y
• cisco ios xe 17.9.1y1
• cisco ios xe 17.9.2
• cisco ios xe 17.9.2a
• cisco ios xe 17.9.3
• cisco ios xe 17.9.3a
• cisco ios xe 17.10.1
• cisco ios xe 17.10.1a
• cisco ios xe 17.10.1b
• cisco ios xe 17.11.1
• cisco ios xe 17.11.1a
• cisco ios xe 17.11.99sw
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness